Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2026-10-01 16:42:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new.1253 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "chromium" Thu Oct 1 16:42:00 2026 rev:551 rq:1381544 version:154.0.8037.92 Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2026-09-24 22:57:40.785781282 +0200 +++ /work/SRC/openSUSE:Factory/.chromium.new.1253/chromium.changes 2026-10-01 16:43:15.798529468 +0200 @@ -1,0 +2,37 @@ +Tue Sep 29 20:51:28 UTC 2026 - Andreas Stieger <[email protected]> + +- Chromium 154.0.8037.92 (boo#1283262): + * CVE-2026-102331: Buffer overflow in ANGLE + * CVE-2026-102317: Improper privilege management in Mojo + * CVE-2026-102312: UI misrepresentation in Omnibox + * CVE-2026-102313: Uninitialized resource in ANGLE + * CVE-2026-102299: Type confusion in V8 + * CVE-2026-102306: Use after free in Bluetooth + * CVE-2026-102307: Uninitialized resource in Dawn + * CVE-2026-102323: Type confusion in V8 + * CVE-2026-102303: Uninitialized resource in GPU + * CVE-2026-102311: Uninitialized resource in GPU + * CVE-2026-102300: Uninitialized resource in WebGPU + * CVE-2026-102326: Type confusion in V8 + * CVE-2026-102316: Use after free in Views + * CVE-2026-102304: Use after free in Passwords + * CVE-2026-102328: Type confusion in V8 + * CVE-2026-102309: Use after free in FullScreen + * CVE-2026-102325: Uninitialized resource in Skia + * CVE-2026-102308: Use after free in Views + * CVE-2026-102301: Out of bounds write in GPU + * CVE-2026-102319: Uninitialized resource in GPU + * CVE-2026-102324: Use after free in PictureInPicture + * CVE-2026-102318: Out of bounds read in WebGL + * CVE-2026-102329: Cross-site scripting in WebUI + * CVE-2026-102315: Uninitialized resource in Media + * CVE-2026-102302: Buffer overflow in V8 + * CVE-2026-102321: Type confusion in V8 + * CVE-2026-102320: Missing authorization in CORS + * CVE-2026-102310: Missing authorization in Payments + * CVE-2026-102327: Incorrect authorization in WebView + * CVE-2026-102330: Incorrect authorization in SiteIsolation + * CVE-2026-102314: UI misrepresentation in TabStrip + * CVE-2026-102305: UI misrepresentation in SignIn + +------------------------------------------------------------------- Old: ---- chromium-154.0.8037.57-linux.tar.xz New: ---- chromium-154.0.8037.92-linux.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.JcnVxj/_old 2026-10-01 16:43:30.712154651 +0200 +++ /var/tmp/diff_new_pack.JcnVxj/_new 2026-10-01 16:43:30.714154735 +0200 @@ -139,7 +139,7 @@ %global official_build 1 Name: chromium%{n_suffix} -Version: 154.0.8037.57 +Version: 154.0.8037.92 Release: 0 Summary: Google's open source browser project License: BSD-3-Clause AND LGPL-2.1-or-later ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.JcnVxj/_old 2026-10-01 16:43:30.908162867 +0200 +++ /var/tmp/diff_new_pack.JcnVxj/_new 2026-10-01 16:43:30.911162993 +0200 @@ -1,7 +1,7 @@ -mtime: 1790114995 -commit: 5d32a7137dbcf37e9b8ee50e8f5fe6d7b44e483dcc259a472c14fb168ffe99f5 +mtime: 1790716295 +commit: 655d997e895914d2c9b69325f075024faa49595d689ef4a8039218801a80151c url: https://src.opensuse.org/chromium/chromium -revision: 5d32a7137dbcf37e9b8ee50e8f5fe6d7b44e483dcc259a472c14fb168ffe99f5 +revision: 655d997e895914d2c9b69325f075024faa49595d689ef4a8039218801a80151c trackingbranch: main projectscmsync: https://src.opensuse.org/chromium/_ObsPrj.git ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-29 23:11:35.000000000 +0200 @@ -0,0 +1,4 @@ +.osc +*.patch~ +*-build/ +.*.swp ++++++ chromium-154.0.8037.57-linux.tar.xz -> chromium-154.0.8037.92-linux.tar.xz ++++++ /work/SRC/openSUSE:Factory/chromium/chromium-154.0.8037.57-linux.tar.xz /work/SRC/openSUSE:Factory/.chromium.new.1253/chromium-154.0.8037.92-linux.tar.xz differ: char 15, line 1
